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Abstract. Threads as considered in basic thread algebra are primarily 
looked upon as behaviours exhibited by sequential programs on execu- 
tion. It is a fact of life that sequential programs are often fragmented. 
Consequently, fragmented program behaviours are frequently found. In 
this paper, we consider this phenomenon. We extend basic thread al- 
gebra with the barest mechanism for sequencing of threads that are 
taken for fragments. This mechanism, called poly-threading, supports 
both autonomous and non-autonomous thread selection in sequencing. 
We relate the resulting theory to the algebraic theory of processes known 
as ACP and use it to describe analytic execution architectures suited 
for fragmented programs. We also consider the case where the steps 
of fragmented program behaviours are interleaved in the ways of non- 
distributed and distributed multi-threading. 
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1 Introduction 

In [11], we considered fragmentation of sequential programs that take the form of 
instruction sequences in the setting of program algebra [4]. The objective of the 
current paper is to develop a theory of the behaviours exhibited by sequential 
programs on execution that covers the case where the programs have been split 
into fragments. It is a fact of life that sequential programs are often fragmented. 
We remark that an important reason for fragmentation of programs is that 
the execution architecture at hand to execute them sets bounds to the size of 
programs. However, there may also be other reasons for program fragmentation, 
for instance business economical reasons. 

In [4] , a start was made with a line of research in which sequential programs 
that take the form of instruction sequences and the behaviours exhibited by se- 
quential programs on execution are investigated (see e.g. [3, 7, 18]). In this line of 
research, the view is taken that the behaviour exhibited by a sequential program 
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on execution takes the form of a thread as considered in basic thread algebra [4]. 1 
With the current paper, we carry on this line of research. Therefore, we consider 
program fragment behaviours that take the form of threads as considered in 
basic thread algebra. 

We extend basic thread algebra with the barest mechanism for sequencing 
of threads that are taken for program fragment behaviours. This mechanism 
is called poly-threading. Inherent in the behaviour exhibited by a program on 
execution is that it does certain steps for the purpose of interacting with some 
service provided by an execution environment. In the setting of thread algebra, 
the use mechanism is introduced in [8] to allow for this kind of interaction. Poly- 
threading supports the initialization of one of the services used every time a 
thread is started up. With poly-threading, a thread selection is made whenever 
a thread ends up with the intent to achieve the start-up of another thread. 
That thread selection can be made in two ways: by the terminating thread or 
externally. We show how thread selections of the latter kind can be internalized. 

Both thread and service look to be special cases of a more general notion 
of process. Therefore, it is interesting to know how threads and services as con- 
sidered in the extension of basic thread algebra with poly-threading relate to 
processes as considered in theories about concurrent processes such as ACP [1], 
CCS [17] and CSP [16]. We show that threads and services as considered in the 
extension of basic thread algebra with poly-threading can be viewed as processes 
that are definable over the extension of ACP with conditions introduced in [5]. 

An analytic execution architecture is a model of a hypothetical execution en- 
vironment for sequential programs that is designed for the purpose of explaining 
how a program may be executed. The notion of analytic execution architecture 
defined in [12] is suited to sequential programs that have not been split into 
fragments. We use the extension of basic thread algebra with poly-threading 
to describe analytic execution architectures suited to sequential programs that 
have been split into fragments. 

In systems resulting from contemporary programming, we find distributed 
multi-threading and threads that are program fragment behaviours. For that 
reason, it is interesting to combine the theory of distributed strategic interleaving 
developed in [9] with the extension of basic thread algebra with poly-threading. 
We take up the combination by introducing two poly-threading covering varia- 
tions of the simplest form of interleaving for distributed multi-threading consid- 
ered in [9]. 

The line of research carried on in this paper has two main themes: the theme 
of instruction sequences and the theme of threads. Both [11] and the current 
paper are concerned with program fragmentation, but [11] elaborates on the 
theme of instruction sequences and the current paper elaborates on the theme 
of threads. It happens that there are aspects of program fragmentation that can 
be dealt with at the level of instruction sequences, but cannot be dealt with at 

1 In [4], basic thread algebra is introduced under the name basic polarized process 
algebra. Prompted by the development of thread algebra [8], which is a design on 
top of it, basic polarized process algebra has been renamed to basic thread algebra. 
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the level of threads. In particular, the ability to replace special instructions in 
an instruction sequence fragment by different ordinary instructions every time 
execution is switched over to that fragment cannot be dealt with at the level of 
threads. Threads, which are intended for explaining the meaning of sequential 
programs, turn out to be too abstract to deal with program fragmentation in 
full. 

This paper is organized as follows. First, we review basic thread algebra and 
the use mechanism (Sections 2 and 3). Next, we extend basic thread algebra with 
poly-threading and show how external thread selections in poly-threading can be 
internalized (Sections 4 and 5). Following this, we review ACP with conditions 
and relate the extension of basic thread algebra with poly-threading to ACP 
with conditions (Sections 6 and 7). Then, we discuss analytic execution archi- 
tectures suited for programs that have been fragmented (Section 8). After that, 
we introduce forms of interleaving suited for non-distributed and distributed 
multi-threading that cover poly-threading (Sections 9, 10 and 11). Finally, we 
make some concluding remarks (Section 12). 

Up to and including Section 8, this paper is a revision of [10]. In that paper, 
the term "sequential poly-threading" stands for "poly-threading in a setting 
where multi-threading or any other form of concurrency is absent" . We conclude 
in hindsight that the use of this term is unfortunate and do not use it in the 
current paper. 

2 Basic Thread Algebra 

In this section, we review BTA, a form of process algebra which is tailored 
to the description of the behaviour of deterministic sequential programs under 
execution. The behaviours concerned are called threads. 

In BTA, it is assumed that there is a fixed but arbitrary finite set of basic 
actions A with tau ^ A. We write At au for .4U {tau}. The members of ^4tau are 
referred to as actions. 

The intuition is that each basic action performed by a thread is taken as a 
command to be processed by a service provided by the execution environment of 
the thread. The processing of a command may involve a change of state of the 
service concerned. At completion of the processing of the command, the service 
produces a reply value. This reply is either T or F and is returned to the thread 
concerned. 

Although BTA is one-sorted, we make this sort explicit. The reason for this 
is that we will extend BTA with additional sorts in Sections 3 and 4. 

The algebraic theory BTA has one sort: the sort T of threads. To build terms 
of sort T, BTA has the following constants and operators: 

— the deadlock constant D : T; 

— the termination constant S : T; 

— for each a e A tau , the postconditional composition operator _<a>_:TxT — ► 
T. 
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Table 1. Axiom of BTA 



x < tau > y = x < tau > x Tl 



Table 2. Axioms for guarded recursion 

(X\E) = (t x \E) if X = t x € E RDP 
E X = if X € V(£) RSP 



Terms of sort T are built as usual (see e.g. [19,20]). Throughout the paper, we 
assume that there are infinitely many variables of sort T, including x,y, z. 

We introduce action prefixing as an abbreviation: a op, where p is a term of 
sort T, abbreviates p < a > p. 

Let p and q be closed terms of sort T and a 6 A t3U - Then p <a> q will 
perform action a, and after that proceed as p if the processing of a leads to the 
reply T (called a positive reply), and proceed as q if the processing of a leads 
to the reply F (called a negative reply). The action tau plays a special role. It 
is a concrete internal action: performing tau will never lead to a state change 
and always lead to a positive reply, but notwithstanding all that its presence 
matters. 

BTA has only one axiom. This axiom is given in Table 1. Using the abbrevia- 
tion introduced above, axiom Tl can be written as follows: x < tau > y = tau o x. 

Each closed BTA term of sort T denotes a finite thread, i.e. a thread of which 
the length of the sequences of actions that it can perform is bounded. Guarded 
recursive specifications give rise to infinite threads. 

A guarded recursive specification over BTA is a set of recursion equations 
E = {X = tx \ X E V}, where V is a set of variables of sort T and each tx 
is a term of the form D, S or t < a > t' with t and t' BTA terms of sort T that 
contain only variables from V. We write V(E) for the set of all variables that 
occur on the left-hand side of an equation in E. We are only interested in models 
of BTA in which guarded recursive specifications have unique solutions, such as 
the projective limit model of BTA presented in [2]. A thread that is the solution 
of a finite guarded recursive specification over BTA is called a finite-state thread. 

We extend BTA with guarded recursion by adding constants for solutions 
of guarded recursive specifications and axioms concerning these additional con- 
stants. For each guarded recursive specification E and each X 6 ~V(E), we add a 
constant of sort T standing for the unique solution of E for X to the constants 
of BTA. The constant standing for the unique solution of E for X is denoted by 
(X\E). Moreover, we add the axioms for guarded recursion given in Table 2 to 
BTA, where we write (tx\E) for t x with, for all Y E V{E), all occurrences of 
Y in t x replaced by (Y\E). In this table, X, t x and E stand for an arbitrary 
variable of sort T, an arbitrary BTA term of sort T and an arbitrary guarded 
recursive specification over BTA, respectively. Side conditions are added to re- 
strict the variables, terms and guarded recursive specifications for which X, tx 
and E stand. 
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We will write BTA+REC for BTA extended with the constants for solutions 
of guarded recursive specifications and axioms RDP and RSP. 

3 Interaction of Threads with Services 

A thread may perform certain basic actions only for the sake of having itself 
affected by some service. When processing a basic action performed by a thread, 
a service affects that thread by returning a reply value to the thread at comple- 
tion of the processing of the basic action. In this section, we introduce the use 
mechanism, which is concerned with this kind of interaction between threads 
and services. 2 

It is assumed that there is a fixed but arbitrary finite set T of foci and a fixed 
but arbitrary finite set M. of methods. Each focus plays the role of a name of a 
service provided by the execution environment that can be requested to process 
a command. Each method plays the role of a command proper. For the set A 
of basic actions, we take the set {f.m /ef,m£ M}. A thread performing a 
basic action f.m is considered to make a request to a service that is known to 
the thread under the name / to process command to. 

We introduce yet another sort: the sort S of services. However, we will not 
introduce constants and operators to build terms of this sort. S is considered to 
stand for the set of all services. We identify services with functions H : Ai + — ► 
{T, F, B} that satisfy the following condition: 

Vp e M+, to e M • (H(p) = B => H(p ~ (to)) = B) . 3 

We write S for the set of all services and 1Z for the set {T, F, B}. Given a service 
H and a method to G M, the derived service of H after processing to, written 
is defined by £H(p) = H((m) ~ p). 
A service H can be understood as follows: 

— if if ((to)) ^ B, then the request to process to is accepted by the service, the 
reply is H((m}), and the service proceeds as -j^H\ 

— if H((m)) = B, then the request to process to is not accepted by the service. 

For each / e T, we introduce the use operator _//.:TxS^T. Intuitively, 
p /f H is the thread that results from processing all basic actions performed by 
thread p that are of the form f.m by service H. When a basic action of the 
form f.m performed by thread p is processed by service H, it is turned into 
the internal action tau and postconditional composition is removed in favour of 
action prefixing on the basis of the reply value produced. 

The axioms for the use operators are given in Table 3. In this table, / and g 

2 This version of the use mechanism was first introduced in [8]. In later papers, it is 
also called thread-service composition. 

3 We write D* for the set of all finite sequences with elements from set D and D + 
for the set of all non-empty finite sequences with elements from set D. We use 
the following notation for finite sequences: { ) for the empty sequence, (d) for the 
sequence having d as sole element, a^a' for the concatenation of finite sequences a 
and a', and len(cr) for the length of finite sequence a. 
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Table 3. Axioms for use 



S/ f H = S TSUI 

D // H = D TSU2 

tau o x If H = tau o (a; // H) TSU3 

(x < g.m >y)/ f H=(x // H) < g.m > (y // H) if -./ = g TSU4 

(x < f.m >y)/ f H = tau o (x / f ^H) if H((m)) = T TSU5 

(x <3 /.m >y)/ f H = tau o („ /, if H((m)) = F TSU6 

(x <f.m>y)/ f H = D if ff((m» = B TSU7 



stand for arbitrary foci from T and m stands for an arbitrary method from M . 
Axioms TSU3 and TSU4 express that the action tau and basic actions of the 
form g.m with / ^ g are not processed. Axioms TSU5 and TSU6 express that a 
thread is affected by a service as described above when a basic action of the form 
f.m performed by the thread is processed by the service. Axiom TSU7 expresses 
that deadlock takes place when a basic action to be processed is not accepted. 

Let T stand for cither BTA or BTA+REC. Then we will write T+TSU for 
T, taking the set {f.m | / G T \m e M} for A, extended with the use operators 
and the axioms from Table 3. 



4 Poly-Threading 

BTA is a theory of the behaviours exhibited by sequential programs on execution. 
To cover the case where the programs have been split into fragments, we extend 
BTA in this section with the barest mechanism for sequencing of threads that 
are taken for fragments. The resulting theory is called TA pt . 

Our general view on the way of achieving a joint behaviour of the program 
fragments in a collection of program fragments between which execution can be 
switched is as follows: 

— there can only be a single program fragment being executed at any stage; 

— the program fragment in question may make any program fragment in the 
collection the one being executed; 

— making another program fragment the one being executed is effected by 
executing a special instruction for switching over execution; 

— any program fragment can be taken for the one being executed initially. 

In order to obtain such a joint behaviour from the behaviours of the program 
fragments on execution, a mechanism is needed by which the start-up of an- 
other program fragment behaviour is effectuated whenever a program fragment 
behaviour ends up with the intent to achieve such a start-up. In the setting of 
BTA, taking threads for program fragment behaviours, this requires the intro- 
duction of an additional sort, additional constants and additional operators. In 
doing so it is supposed that a collection of threads that corresponds to a collec- 
tion of program fragments between which execution can be switched takes the 
form of a sequence, called a thread vector. 
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Like in BTA+TSU, it is assumed that there is a fixed but arbitrary finite set 
T of foci and a fixed but arbitrary finite set M. of methods. It is also assumed 
that tls G T and init e A4. The focus tls and the method init play special roles: tls 
is the focus of a service that is initialized each time a thread is started up by the 
mechanism referred to above and init is the initialization method of that service. 
For the set A of basic actions, we take again the set {/.to /sf,me M}. 

TA pt has the sort T of BTA and in addition the sort TV of thread vectors. 
To build terms of sort T, TA pt has the constants and operators of BTA and in 
addition the following additional constants and operators: 

— for each i G N, the internally controlled switch-over constant Si : T; 

— the externally controlled switch-over constant E : T; 

— the poly-threading operator □ : T x TV — ► T; 

— for each k G N + , 4 the k-ary external choice operator : T x ■ ■ ■ x T — > T. 

k times 

To build terms of sort TV, TA pt has the following constants and operators: 

— the empty thread vector constant ( } : TV; 

— the singleton thread vector operator (_) : T — > TV; 

— the thread vector concatenation operator _ ~ _ : TV x TV — > TV. 

Throughout the paper, we assume that there are infinitely many variables of 
sort TV, including a, (5, 7. 

In the context of the poly-threading operator □, the constants Si and E are 
alternatives for the constant S which produce additional effects. Let p, pi, ■ ■ ■ , 
p n be closed terms of sort T. Then (pi) ~ . . . ~ (p n )) first behaves as p, but 
when p terminates: 

— in the case where p terminates with S, it terminates; 

— in the case where p terminates with Si: 

• it continues by behaving as 111(f),, (pi) ~ . . . ~ (p n )) if 1 < i < n, 

• it deadlocks otherwise; 

— in the case where p terminates with E, it continues by behaving as one of 

(pi) ~ . . . ~ (p„)), . . . , □(?>„, (pi) ~ . . . ~ (p n )) or it deadlocks. 

Moreover, the basic action tls. init is performed between termination and continu- 
ation. In the case where p terminates with E, the choice between the alternatives 
is made externally. Nothing is stipulated about the effect that the constants Si 
and E produce in the case where they occur outside the context of the poly- 
threading operator. 

The poly-threading operator concerns sequencing of threads. A thread selec- 
tion involved in sequencing of threads is called an autonomous thread selection 
if the selection is made by the terminating thread. Otherwise, it is called a 
non- autonomous thread selection. The constants Si are meant for autonomous 

4 We write N + for the set {n £ N | n > 0}. Throughout the paper, we use the 
convention that k and n stand for arbitrary elements of N + and N, respectively. 
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Table 4. Axioms for poly-threading 



m(S,a)=S SPTl 

m(D,a) = D SPT2 

m(x < a > y, a) = m(x, a) < a > m(y, a) SPT3 

QJ(Si, (m) ~ . . . ~ (z„)) = tls.init o m(xi, {xi} ~ . . . ~ (i„)) if 1 < i < n SPT4 

m(Si, (m) ~ . . . ~ ( Xn }) = D ifi = 0Vi>n SPT5 

m(E, (xi) ~ . . . ~ (a*)) = 

□ fc (tls.init o m(xi, (xi) - . . . - (xfc)), . . ., tls.init o m(x fc , (an) - . . . - (x k ))) SPT6 

m(E,<)) = D SPT7 



thread selections and the constant E is meant for non-autonomous thread selec- 
tions. We remark that non-autonomous thread selections are immaterial to the 
joint behaviours of program fragments referred to above. 

In the case of a non-autonomous thread selection, it comes to an external 
choice between a number of threads. The external choice operator Ok concerns 
external choice between k threads. Let p\, . . . , pk be closed terms of sort T. 
Then Ok(pi, ■ ■ ■ ,Pk) behaves as the outcome of an external choice between p\, 
. . . , Pk and D. 

TA pt has the axioms of BTA and in addition the axioms given in Table 4. 
In this table, a stands for an arbitrary action from At 3U - The additional axioms 
express that threads are sequenced by poly-threading as described above. There 
are no axioms for the external choice operators because their basic properties 
cannot be expressed as equations or conditional equations. For each k G N + , the 
basic properties of Ok are expressed by the following disjunction of equations: 
Vie[i,fe] a k(xi, ...,Xk) = XiV O k (xi, ...,x k ) = D. 5 

To be fully precise, we should give axioms concerning the constants and 
operators to build terms of the sort TV as well. We refrain from doing so because 
the constants and operators concerned are the usual ones for sequences. Similar 
remarks apply to the sort DTV introduced later and will not be repeated. 

Guarded recursion can be added to TA pt as it is added to BTA in Section 2. 
We will write TA pt +REC for TA pt extended with the constants for solutions of 
guarded recursive specifications and axioms RDP and RSP. 

The use mechanism can be added to TA pt as it is added to BTA in Section 3. 
Let T stand for cither TA pt or TA pt +REC. Then we will write T+TSU for T 
extended with the use operators and the axioms from Table 3. 

5 Internalization of Non- Autonomous Thread Selection 

In the case of non-autonomous thread selection, the selection of a thread is 
made externally. In this section, we show how non-autonomous thread selection 
can be internalized. For that purpose, we first extend TA pt with postconditional 

5 We use the notation [n, m], where n,m € N, for the set {i 6 N | n < i < m}. 
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Table 5. Axioms for postconditional switching 



tau > k (xi, 



,x k 



■ tau > k {xi, . . . ,xi) 



m(a> fe (a;i, ...,x k ),a) = a> k (Ul(xi,a), . . .,Ul(xk,a)) 

tau > fc (x!, . . . , x k ) /f H = tau > fe { Xl / f H,...,x k / f H) 

g.m> k (xi,. ..,x k )/fH = g.m> k (xi j s H, . . . , x k // H) if -./ = g 

f.m > k (x!,..., x k ) / f H = tau o ( Xi // -J^H) if H{{m)) = i A i € [1, k] 

f.rn > k ( Xl , ...,x k )/ f H=D if ->H{{m)) £ [1, k] 



switching. Postconditional switching is like postconditional composition, but cov- 
ers the case where services processing basic actions produce reply values from 
the set N instead of reply values from the set {T, F}. Postconditional switching 
is convenient when internalizing non-autonomous thread selection, but it is not 
necessary. 

For each a £ At au and k G N + , wc introduce the fc-ary postconditional switch 
operator at> k : T x • • ■ x T — » T. Let pi, . . . , p k be closed terms of sort T. 

k times 

Then a> fe (pi, . . . ,pk) will first perform action a, and then proceed as p\ if the 
processing of a leads to the reply 1 , . . . , p k if the processing of a leads to the 
reply fc. 

The axioms for the postconditional switching operators are given in Table 5. 
In this table, a stands for an arbitrary action from Atau, f and g stand for 
arbitrary foci from T, and m stands for an arbitrary method from A4. 

We proceed with the internalization of non-autonomous thread selections. Let 
p, Pi, ■ ■ ■ , Pk be closed terms of sort T. The idea is that ffl(p, (p\) ~ . . . ~ (p k )) 
can be internalized by: 

— replacing in □(p, (pi) ^ . . . <->■ (p k )) all occurrences of E by Sfc+1; 

— appending a thread that can make the thread selections to the thread vector. 

Simultaneous with the replacement of all occurrences of E by Sfc+1, all occur- 
rences of Sfc+1 must be replaced by D to prevent inadvertent selections of the 
appended thread. When making a thread selection, the appended thread has 
to request the external environment to give the position of the thread that it 
would have selected itself. We make the simplifying assumption that the external 
environment can be viewed as a service. 

Let p, pi, ■ ■ ■ , p k be closed terms of sort T. Then the internalization of 
(Pi) - • • • - (Pfe» is 

m(p(p), ( P ( Pl )) - ... - (p{p k )) - (ext.sel> fe (Sl, . . . , Sfc))) , 

where p(p') is p' with simultaneously all occurrences of E replaced by Sfc+1 and 
all occurrences of Sfc+1 replaced by D. Here, it is assumed that ext e T and 
scl e M. 

Postconditional switching is not really necessary for internalization. Let fci = 
[fc/2j, fc 2 = [fci/2j, k 3 = [(fc — fci)/2j, .... Using postconditional composition, 
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first a selection can be made between {p\, . . . ,Pki} and {p^+i, ■ ■ ■ ,Pk}, next 
a selection can be made between {pi, . . . ,pk 2 } and {pk 2 +i, ■ ■ ■ ,Pki} or between 
. . . ,Pk 3 } and {pk 3 +i, ■ ■ ■ ,Pk}, depending on the outcome of the previous 
selection, etcetera. In this way, the number of actions performed to select a 
thread is between [ 2 log(fc)J and |~ 2 log(fc)] . 

6 ACP with Conditions 

In Section 7, we will investigate the connections of threads and services with the 
processes considered in ACP-style process algebras. We will focus on ACP C , an 
extension of ACP with conditions introduced in [5]. In this section, we shortly 
review ACP C . 

ACP C is an extension of ACP with conditional expressions in which the 
conditions are taken from a Boolean algebra. ACP C has two sorts: (i) the sort 
P of processes, (ii) the sort C of conditions. In ACP C , it is assumed that the 
following has been given: a fixed but arbitrary set A (of actions), with 5 £ A, 
a fixed but arbitrary set C a t (of atomic conditions), and a fixed but arbitrary 
commutative and associative function | : A U {5} xAU{(5} AU {5} such that 
8 | a = S for all a e A U {5}. The function | is regarded to give the result of 
synchronously performing any two actions for which this is possible, and to be 
6 otherwise. Henceforth, we write A,5 for A U {5}. 

Let p and q be closed terms of sort P, £ and £ be closed term of sort C, 
a E A, H C A, and n £ C a t- Intuitively, the constants and operators to build 
terms of sort P that will be used to define the processes to which threads and 
services correspond can be explained as follows: 

— S can neither perform an action nor terminate successfully; 

— a first performs action a unconditionally and then terminates successfully; 

— p + q behaves either as p or as q, but not both; 

— p - q first behaves as p, but when p terminates successfully it continues as q; 

— C '-^ P behaves as p under condition £; 

— p || q behaves as the process that proceeds with p and q in parallel; 

— 3h{p) behaves the same as p, except that actions from H are blocked. 

Intuitively, the constants and operators to build terms of sort C that will be 
used to define the processes to which threads and services correspond can be 
explained as follows: 

— i] is an atomic condition; 

— _L is a condition that never holds; 

— T is a condition that always holds; 

— — ( is the opposite of (; 

— ( LI £ is either £ or £; 

— ( n £ is both C and £. 

The remaining operators of ACP C are of an auxiliary nature. They are needed 
to axiomatize ACP C . The axioms of ACP C are given in [5]. 
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We write J2 ieX Pi, where 1 — . . . ,i n } and p il7 . . . ,p in are terms of sort 
P, for p ix + . . . + p in . The convention is that J2 ieI Pi stands for 5 if 1 = 0. We 
use the notation p < £ \> q, where p and q are terms of sort P and £ is a term of 
sort C, for £ p H — £ :— > 

A process is considered definable over ACP C if there exists a guarded recursive 
specification over ACP C that has that process as its solution. 

A recursive specification over ACP C is a set of recursion equations E = {X = 
tx \ X GV}, where V is a set of variables and each tx is a term of sort P that 
only contains variables from V. Let t be a term of sort P containing a variable X. 
Then an occurrence of X in t is guarded if t has a subterm of the form a ■ t 1 where 
a G A and t' is a term containing this occurrence of X. Let £ be a recursive 
specification over ACP C . Then E is a guarded recursive specification if, in each 
equation X = tx € E, all occurrences of variables in tx are guarded or tx can 
be rewritten to such a term using the axioms of ACP C in either direction and/or 
the equations in E except the equation X = tx from left to right. We only 
consider models of ACP C in which guarded recursive specifications have unique 
solutions, such as the full splitting bisimulation models of ACP C presented in [5]. 

For each guarded recursive specification E and each variable X that occurs 
as the left-hand side of an equation in E, we introduce a constant of sort P 
standing for the unique solution of E for X. This constant is denoted by (X\E). 
The axioms for guarded recursion are also given in [5]. 

In order to express the use operators, we need an extension of ACP C with 
action renaming operators. Intuitively, the action renaming operator pf, where 
/ : A — » A, can be explained as follows: pf(p) behaves as p with each action 
replaced according to /. The axioms for action renaming arc the ones given 
in [13] and in addition the equation pf(<fi x) = (f> :— > Pf(x). We write p a >^a" 
for the renaming operator p g with g defined by g(a') — a" and g{a) = a if a =^ a'. 

In order to explain the connection of threads and services with ACP C fully, 
we need an extension of ACP C with the condition evaluation operators CE/j 
introduced in [5]. Intuitively, the condition evaluation operator CE^, where h is 
a function on conditions that is preserved by _L, T, — , U and n, can be explained 
as follows: CEh(p) behaves as p with each condition replaced according to h. The 
important point is that, if h(() E {_L, T}, all subterms of the form ( :— > q can be 
eliminated. The axioms for condition evaluation are also given in [5]. 



7 Threads, Services and ACP c -Definable Processes 

In this section, we relate threads and services as considered in TA pt +REC+TSU 
to processes that arc definable over ACP C with action renaming. 
For that purpose, A, | and C at are taken as follows: 

A = {sf(d) f e T,d e M Uft} U {r f (d) \ f e T, d e M u K} 
U {s cxt (n) | n e N} U {r oxt (n) n G N} U {stop, stop, stop*, i} 
U {s sorv (r) | r G 71} U {r scrv (m) | m G Ai} ; 
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for all a E A, / G J 7 , d G X U 7£, m e M, r E 



1Z and n G N: 



B/(d)|r/(d) 
S/ (d) | a = (5 
a 1 17(d) = 5 



= 1 



if a ^ 17(d) , 
if a^s/(d) , 



stop I stop = stop* 
stop I a = S 



a I stop = S 



if a 7^ stop , 
if a 7^ stop , 



Sext(rc) I r ext (n) 
Sext(rc) I a = 8 
a I r ext (n) = S 



i I a = 5 



if a 7^ r ext (n) , 
if a ^ s ext (n) , 



SscrvM I a = 5 , 
a I r scrv (m) = <5 ; 



and 



Cat = {H((m)) 



r\H eS,meM,r eU} . 



For each / G J 7 , the set A/ C A and the function i?/ : A — > A are defined as 
follows: 

A/ = {s/(d) deMUK}U {r/(d) \ deMUTZ} ; 
for all a e A, m e M and r E TZ: 

R f (s seTV (r)) = s f (r) , 
Rf(r seT v(m)) = r/(m) , 

i?/(a) = a if Ar'eK a ^ S SC rv(r') A Am'eA^ a ^ r serv(m') . 

The sets Af and the functions Rf are used below to express the use operators 
in terms of the operators of ACP C with action renaming. 

For convenience, we introduce a special notation. Let a be a term of sort 
TV, let pi, . . . ,p n be terms of sort T such that a = (pi) ~ . . . ~ (p n )> an d let 
i E [l,n]. Then we write a[i] for pj. 

We proceed with relating threads and services as considered in TA pt +REC+ 
TSU to processes definable over ACP C with action renaming. The underlying idea 
is that threads and services can be viewed as processes that are definable over 
ACP C with action renaming. We define those processes by means of a translation 
function [_] from the set of all terms of sort T to the set of all function from 
the set of all terms of sort TV to the set of all terms of sort P and a translation 
function [_] from the set of all services to the set of all terms of sort P. These 
translation functions are defined inductively by the equations given in Table 6, 
where we write in the last equation tw for the term 



Y, rscrvM ' s selv (H'((m))) ■ (X_e_ H , < H'((m))=J U H'((m)) = F> X H >) 



Let p be a closed term of sort T. Then the process algebraic interpretation of p 
is [p](()). Henceforth, we write [p] for [p](()). 

Notice that ACP is sufficient for the translation of terms of sort T: no con- 
ditional expressions occur in the translations. For the translation of services, we 
need the full power of ACP C . 



+ stop . 
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Table 6. Definition of translation functions 



[X\(a)=X 
IS] (a) = stop 

[D] (a) = i-<5 

Iti <tau>t 2 ](a) =i-i - [ti](a) 

[ti < /.m > t 2 ](a) = s/(m) • (r,(T) • [ti](a) + r,(F) ■ [fa] (a)) 

[Si] (a) = tls.init ■ [a[i]] (a) if 1 < i < len(a) 

[Si](a)=i-<5 if i = OVi > len(a) 

[E] (a) = E ie[ i,ien(a)] r e*t(i) ■ tls.init ■ [a[t]] (a) + i • 5 
p(t,a')](a) = W(a') 

[□*(«!, . . . , t fc )](a) = E ie[ i,*] r ext(i) ■ [ti](a) + i ■ 5 

I(X|£)](a) = = [t](a) | X = t € E}) 

{t/ f Hj(a) = p s top^ s to P (a {stop ,^ } (^ / (W(a) || p Rf ([H])))) 

\H\ = {X H \{X H , =t H , | i/'£5}) 



The translations given above preserve the axioms of TA pt +REC+TSU. 
Roughly speaking, this means that the translations of these axioms are derivable 
from the axioms of ACP C with action renaming and guarded recursion. Before we 
make this fully precise, we have a closer look at the axioms of TA pt +REC+TSU. 

A proper axiom is an equation or a conditional equation. In Tables 1-4, we 
do not only find proper axioms. In addition to proper axioms, we find: (i) ax- 
iom schemas without side conditions; (ii) axiom schcmas with syntactic side 
conditions; (hi) axiom schemas with semantic side conditions. The axioms of 
TA pt +REC+TSU are obtained by replacing each axiom schema by all its in- 
stances. Owing to the presence of axiom schemas with semantic side conditions, 
the axioms of TA pt +REC+TSU include proper axioms and axioms with seman- 
tic side conditions. Therefore, semantic side conditions take part in the trans- 
lation of the axioms as well. The instances of TSU5, TSU6, and TSU7 are the 
only axioms of TA pt +REC+TSU with semantic side conditions. These semantic 
side conditions, being of the form H{{m)) = r, are looked upon as elements of 

Cat- 

Consider the set that consists of: 

— all equations t\ = t 2 , where t\ and t 2 are terms of sort T; 

— all conditional equations E =>■ t\ = t 2 , where t\ and t 2 are terms of sort T 
and E is a set of equations t[ = t' 2 where t[ and t' 2 are terms of sort T; 

— all expressions t\ — t 2 if 0, where t\ and t 2 are terms of sort T and <j> E C a t- 

We define a translation function [_] from this set to the set of all equations of 
ACP C with action renaming and guarded recursion as follows: 

lh=t 2 } = [til = , 

IE =}► h = t 2 j = {[fj = lt' 2 j 1 1[ =t' 2 eE}^ Ihj = lt 2 j , 
lh = t 2 if cf,} = CE h0uW (Ihj) = CE h0uW (lt 2 j) , 
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where 



$={A ren ^( H ((m))=rA\/, 



r'£ll\{r} 



H({m)) 



r') | HeS,meM} . 



Here is a function on conditions of ACP C that preserves _L, T, — , U and n 
and satisfies h#(Q = T iff ( corresponds to a proposition derivable from \P and 
h&(() = _L iff — ( corresponds to a proposition derivable from <P. 6 

Theorem 1 (Preservation). Let ax be an axiom of TA pt +REC+TSU. Then 
fax} is derivable from the axioms of ACP C with action renaming and guarded 
recursion. 

Proof. The proof is straightforward. In [6], we outline the proof for axiom TSU5. 
The other axioms are proved in a similar way. □ 

8 Execution Architectures for Fragmented Programs 

An analytic execution architecture in the sense of [12] is a model of a hypothetical 
execution environment for sequential programs that is designed for the purpose of 
explaining how a program may be executed. An analytic execution architecture 
makes explicit the interaction of a program with the components of its execution 
environment. The notion of analytic execution architecture defined in [12] is 
suited to sequential programs that have not been split into fragments. In this 
section, we discuss analytic execution architectures suited to sequential programs 
that have been split into fragments. 

The notion of analytic execution architecture from [12] is defined in the set- 
ting of program algebra. In [4], a thread extraction operation _| is defined which 
gives, for each program considered in program algebra, the thread that is taken 
for the behaviour exhibited by the program on execution. In the case of programs 
that have been split into fragments, additional instructions for switching over 
execution to another program fragment are needed. We assume that a collection 
of program fragments between which execution can be switched takes the form 
of a sequence, called an program fragment vector, and that there is an additional 
instruction for each i £ N. Switching over execution to the i-th. program 

fragment in the program fragment vector is effected by executing the instruction 
###«. If i equals or i is greater than the length of the program fragment 
vector, execution of results in deadlock. We extend thread extraction as 

follows: 



An analytic execution architecture for programs that have been split into 
fragments consists of a component containing a program fragment, a component 
containing a program fragment vector and a number of service components. The 
component containing a program fragment is capable of processing instructions 

6 Here we use "corresponds to" for the wordy "is isomorphic to the equivalence class 
with respect to logical equivalence of" (see also [5]). 



!###*! = Si, 



=Si. 
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one at a time, issuing appropriate requests to service components and awaiting 
replies from service components as described in [12] in so far as instructions other 
than switch-over instructions are concerned. This implies that, for each service 
component, there is a channel for communication between the program fragment 
component and that service component and that foci are used as names of those 
channels. In the case of a switch-over instruction, the component containing a 
program fragment is capable of loading the program fragment to which execution 
must be switched from the component containing a program fragment vector. 

The analytic execution architecture made up of a component containing the 
program fragment P, a component containing the program fragment vector a = 
(Pi) ~ . . . ~ (P n ), and service components H\, . . . , H k with channels named f\, 
. . . , fk, respectively, is described by the thread 

m(\p\,{\p 1 \)~...~(\p n \))/ fl H 1 .../ fh H k . 

In the case where instructions of the form do not occur in P, 

im(\p\,(\p 1 \)~...~ { \p n \))/ fi H 1 .../ fk H k i 

agrees with the process-algebraic description given in [12] of the analytic execu- 
tion architecture made up of a component containing the program P and service 
components Hi, . . . , H k with channels named fi, . . . , fk, respectively. 

9 Poly-Threaded Strategic Interleaving 

In this section, we take up the extension of TA pt with a form of interleaving 
suited for multi-threading. 

Multi-threading refers to the concurrent existence of several threads in a 
program under execution. Multi-threading is provided by contemporary pro- 
gramming languages such as Java [14] and C# [15]. Arbitrary interleaving, on 
which ACP [1], CCS [17] and CSP [16] are based, is not an appropriate abstrac- 
tion when dealing with multi-threading. In the case of multi-threading, some 
deterministic interleaving strategy is used. In [8], we introduced a number of 
plausible deterministic interleaving strategies for multi-threading. We proposed 
to use the phrase strategic interleaving for the more constrained form of in- 
terleaving obtained by using such a strategy. In this section, we consider the 
strategic interleaving of fragmented program behaviours. 

As in [8], it is assumed that the collection of threads to be interleaved takes 
the form of a thread vector. In this section, we only cover the simplest interleav- 
ing strategy for fragmented program behaviours, namely pure cyclic interleav- 
ing. In the poly-threaded case, cyclic interleaving basically operates as follows: 
at each stage of the interleaving, the first thread in the thread vector gets a 
turn to perform a basic action or to switch over to another thread and then the 
thread vector undergoes cyclic permutation. We mean by cyclic permutation of 
a thread vector that the first thread in the thread vector becomes the last one 
and all others move one position to the left. If one thread in the thread vector 
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Table 7. Axioms for poly-threaded cyclic interleaving 



Hm«),a) = S PCI1 

|| m ((S> = ||m(A«) PCI2 

|| m ((D)~/?,a) = S D (\\ m (/3,a)) PCI3 

\\m({x<a>y)~/3,a) = || m (/3 ~(x),a) <a> || m (/3 - <j,),a) PCM 
||m((Si)~ /?, <sri)~... = 

tls.inito|| m (/3-(xi>,(xi>-...-(a; n )) if 1 < i < n PCI5 

||ai((Si)~/3,<a;i)~...~(a;„)) = S D (||m(/3, (xi) ~ . . . - (x n ))) if i = 0Vi >n PCI6 
|| m «E>~/3, (xi)-...-<x fc )) = 

□ fe (tls.init o || m (/3 ~ (xi>, (xi) ~ . . . ~ (x fc », 

tls.init o || m (/3 ~ (x fc ), ~ . . . ~ ( Xk ))) PCI7 

|| m ((E)^/3,{))^S D (|| m (/3,())) PCI8 

Table 8. Axioms for deadlock at termination 



S D (S) = D S2D1 
S D (D) = D S2D2 
S D {x<a>y) = S D (x) <a>S D (y) S2D3 
S D (Si)=Si S2D4 
S D (E) = E S2D5 
SD(Dfc(a;i, ■ • • ,Xk)) = □fc(So(a;i), . . . , S D {x k )) S2D6 



deadlocks, the whole does not deadlock till all others have terminated or dead- 
locked. An important property of cyclic interleaving is that it is fair, i.e. there 
will always come a next turn for all active threads. Other plausible interleav- 
ing strategies are treated in [8] . They can also be adapted to the poly-threaded 
case. 

The extension of TA pt with cyclic interleaving is called TA pt . It has the 
sorts T and TV of TA pt . To build terms of sort T, TA P * has the constants 
and operators of TA pt to build terms of sort T and in addition the following 
operator: 

— the poly-threaded cyclic strategic interleaving operator ||n : TV x TV — > T. 

To build terms of sort TV, TA P * has the constants and operators of TA pt to 
build terms of sort TV. 

TA P * has the axioms of TA pt and in addition the axioms given in Tables 7 
and 8. In these tables, a stands for an arbitrary action from ^4 t au- The axioms 
from Table 7 express that threads arc interleaved as described above. In these 
axioms, the auxiliary deadlock at termination operator Sp occurs. The axioms 
from Table 8 show that this operator serves to turn termination into deadlock. 

Guarded recursion and the use mechanism can be added to TA P * as they are 
added to BTA in Sections 2 and 3, respectively. 
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10 Poly-Threaded Distributed Strategic Interleaving 



In this section, we take up the extension of TA pt with a form of interleaving 
suited for distributed multi-threading. 

In order to deal with threads that are distributed over the nodes of a network, 
it is assumed that there is a fixed but arbitrary finite set C of locations such 
that C C N. The set CA of located basic actions is defined by CA = {I. a \ I G 
CAa G A}. Henceforth, basic actions will also be called unlocated basic actions. 
The members of CA U {Z.tau I G C} are referred to as located actions. 

Performing an unlocated action a is taken as performing a at a location still 
to be fixed by the distributed interleaving strategy. Performing a located action 
La is taken as performing a at location I. 

Threads that perform unlocated actions only are called unlocated threads 
and threads that perform located actions only are called located threads. It is 
assumed that the collection of all threads that exist concurrently at the same 
location takes the form of a sequence of unlocated threads, called the local thread 
vector at the location concerned. It is also assumed that the collection of local 
thread vectors that exist concurrently at the different locations takes the form of 
a sequence of pairs, one for each location, consisting of a location and the local 
thread vector at that location. Such a sequence is called a distributed thread 
vector. 

In the distributed case, cyclic interleaving basically operates the same as in 
the non-distributed case. In the distributed case, we mean by cyclic permutation 
of a distributed thread vector that the first thread in the first local thread vector 
becomes the last thread in the first local thread vector, all other threads in the 
first local thread vector move one position to the left, the resulting local thread 
vector becomes the last local thread vector in the distributed thread vector, and 
all other local thread vectors in the distributed thread vector move one position 
to the left. 

When discussing interleaving strategies on distributed thread vectors, we use 
the term current thread to refer to the first thread in the first local thread vector 
in a distributed thread vector and we use the term current location to refer to 
the location at which the first local thread vector in a distributed thread vector 
is. 

The extension of TA pt with cyclic distributed interleaving is called TA P * ; . 
It has the sorts T and TV of TA pt and in addition the following sorts: 

— the sort LT of located threads; 

— the sort DTV of distributed thread vectors. 

To build terms of sort T, TA P * ; has the constants and operators of BTA and in 
addition the following operators: 

— for each n G N, the migration postconditional composition operator 
- <mg(n)> _ :TxT^T. 

To build terms of sort TV, TA P * ; has the constants and operators of TA pt to 
build terms of sort TV. To build terms of sort LT, TA P * ; has the following 
constants and operators: 
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— the deadlock constant D : LT; 

— the termination constant S : LT; 

— for each I G £ and a G Aau, the postconditional composition operator 
_ <l.a> _ :LT x LT -> LT; 

— the deadlock at termination operator So '■ LT — ► LT; 

— the poly-threaded cyclic distributed strategic interleaving operator ||^:DTVx 
TV -> LT. 

To build terms of sort DTV, TA^* ; has the following constants and operators: 

— the empty distributed thread vector constant ( ) : DTV; 

— for each I G C, the singleton distributed thread vector operator [_] ; : TV — ► 
DTV; 

— the distributed thread vector concatenation operator ~ : DTV x DTV — ► 
DTV. 

Throughout the paper, we assume that there are infinitely many variables of sort 
LT, including u,v,w, and infinitely many variables of sort DTV, including 5. 

We introduce located action prefixing as an abbreviation: La op, where p is 
a term of sort LT, abbreviates p < La > p. 

The overloading of D, S, () and ~ could be resolved, but we refrain from 
doing so because it is always clear from the context which constant or operator 
is meant. 

Essentially, the sort DTV includes all sequences of pairs consisting of a lo- 
cation and a local thread vector. 7 The ones that contain a unique pair for each 
location are the proper distributed thread vectors in the sense that the cyclic 
distributed interleaving strategy outlined above is intended for them. Improper 
distributed thread vectors that do not contain duplicate pairs for some loca- 
tion are needed in the axiomatization of this strategy. Improper distributed 
thread vectors that do contain duplicate pairs for some location appear to have 
more than one local thread vector at the location concerned. Their exclusion 
would make it necessary for concatenation of distributed thread vectors to be 
turned into a partial operator. The cyclic distributed interleaving strategy never 
turns a proper distributed thread vector into an improper one or the other way 
round. 

The poly-threaded cyclic distributed strategic interleaving operator serves 
for interleaving of the threads in a proper distributed thread vector according 
to the strategy outlined above, but with support of explicit thread migration. In 
the case where a local thread vector of the form {p < mg(n) > q) ~ 7 with n G £ 
is encountered as the first local thread vector, 7 becomes the last local thread 
vector in the distributed thread vector and p is appended to the local thread 
vector at location n. If n £ £, then 7 ~ (q) becomes the last local thread vector 
in the distributed thread vector. 

In the axioms for cyclic distributed interleaving discussed below, binary func- 
tions app x (where I G L) from unlocated threads and distributed thread vectors 

7 The singleton distributed thread vector operators involve an implicit pairing of their 
operand with a location. 
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Table 9. Definition of the functions app t 



a ppi( x ,0) = 

aPPl(x, h] v ~ 8) = [l ~ (a:)]; if I = I' 

Table 10. Axioms for postconditional composition 



u < Z.tau > v = u < Z.tau > it LT1 



Table 11. Axioms for poly-threaded cyclic distributed interleaving 

:|m«),a) = S PCDI1 

ImdO],, --..-[<)],,, a) = S PCDI2 

b([<)],-*.") = llai(« -[<)],.") PCDI3 

| m ([(S)~ 7 ] ( = Ilai(*-[7]„a) PCDI4 

|m([<D)~7],~5,a) =S D (||m(«~[7] J ,")) PCDI5 
|m([<a;<a>2/) - 7]j - <5,a) = 

|| m (<5-[7-(a;>]pa)</.a> ||m(<5 - [7 - (»)]„ a) PCDI6 
In ([(Si) - 7 ] ; ~ 5, ( Xl ) rv...^ ( x „)) = 

l.t\sAn\to\\ m (8^[-y^(x l )] l ,{x 1 )^...^(x n )) if 1 < i < n PCDI7 

| m ([(Si)~ 7 ] ( ~<5, <*i> ~ . . . ~ <*„» = 

S D (||m(<5 - Mi, fci) ^ • • • - (*«))) if » = V i > n PCDI8 

|ni([<E)~ 7 ],~J, <*i)~...~(x fc )) = 

□ fe (Z.tls.init o || m (<5 ^ [7 ~ (xi)] ; , (xi) ~ . . . ~ (z fc )), 

Z.tls.init o || m (<5 - [7 - (x fc )]„ (zi) - ... - ( Xfc ))) PCDI9 

| m ([(E) - 7 ], - 6, ( )) = S D (|| m (<5 - Mi, ( ))) PCDI10 

|m([(a;<mg(n)>y) -7], ~6,a) = Z.tau o || nl (opp„(x,<5- [7],), a) if n e £ PCDI11 

|m([(a;<mg(n)>y)-7] ( -<5,a) = Z.tauo|| m (5-[7-(j/)] ( ,a) if n g C PCDI12 



to distributed thread vectors are used. For each I S C, app l maps each unlocated 
thread x and distributed thread vector 5 to the distributed thread vector ob- 
tained by appending x to the local thread vector at location I in S. The functions 
ap>Pi are defined in Table 9. 

TAP*j has the axioms of TA pt and in addition the axioms given in Tables 10, 
11 and 12. In these tables, a stands for an arbitrary action from *4 tau . The 
axioms from Table 11 express that threads are interleaved as described above. 
The axioms from Tables 10 and 12 are the axioms from Tables 1 and 8 adapted 
to located threads. 

Guarded recursion and the use mechanism can be added to TAj* ; as they are 
added to BTA in Sections 2 and 3, respectively. 
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Table 12. Axioms for deadlock at termination 



S D (S) = D 


LS2D1 


S D (D) = D 


LS2D2 


S D (u < a > v) = Sd(m) < a > Sd(v) 


LS2D3 


Sd(Si) = Si 


LS2D4 


Sd(E) = E 


LS2D5 


S D (Dfc(Mi, • • • , itfc)) = □ fc (S D (ui), ■ ■ 


.,S D (u fc )) LS2D6 



11 Fragment Searching by Implicit Migration 

In Section 10, it was assumed that the same program fragment behaviours are 
available at each location. In the case where this assumption does not hold, 
distributed interleaving strategies with implicit migration of threads to achieve 
availability of fragments needed by the threads are plausible. We say that such 
distributed interleaving strategies take care of fragment searching. In this section, 
we introduce a variation of the distributed interleaving strategy from Section 10 
with fragment searching. This results in a theory called TA^j fs . 

It is assumed that there is a fixed but arbitrary set X of fragment indices 
such that X — [1, n] for some n € N. 

In the case of the distributed interleaving strategy with fragment searching, 
immediately after the current thread has performed an action, implicit migration 
of that thread to another location may take place. Whether migration really takes 
place, depends on the fragments present at the current location. The current 
thread is implicitly migrated if the following condition is fulfilled: on its next 
turn, the current thread ought to switch over to a fragment that is not present 
at the current location. If this conditions is fulfilled, then the current thread will 
be migrated to the first among the locations where the fragment concerned is 
present. 

To deal with that, we have to enrich distributed thread vectors. The new dis- 
tributed thread vectors are sequences of triples, one for each location, consisting 
of a location, the local thread vector at that location, and the set of all indices 
of fragments that are present at that location. 

TA^*j fs has the same sorts as TA^ ; . To build terms of the sorts T, TV and 
LT, TAjj^j f has the same constants and operators as TAj* ; . To build terms of 
sort DTV, TAJj*j f has the following constants and operators: 

— the empty distributed thread vector constant ( ) : DTV; 

— for each I 6 £ and / CI, the singleton distributed thread vector operator 

: TV -> DTV; 

— the distributed thread vector concatenation operator ~ : DTV x DTV — > 
DTV. 

That is, the operator [_] ; is replaced by the operators [_][. 
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Table 13. Definition of the functions app[ 



aPPl(x,{)) = 

app'i(x, [i]f, ~ S) = [7 ~ (a;>]f ~ <5 if / = /' 
<Wi(z, Mr ~ S) = Mr ~ app' t (x, 5) if I ^ /' 



Essentially, the sort TV includes all sequences of unlocated threads. These 
sequences may serve as local thread vectors and as fragment vectors. The se- 
quences that contain a thread for each fragment index are proper fragment vec- 
tors. In the case of fragment vectors that contain more threads, there appear 
to be inaccessible fragments and in the case of fragment vectors that contain 
less threads, there appear to be disabled fragments. Inaccessible fragments have 
no influence on the effectiveness of cyclic distributed interleaving with fragment 
searching. However, disabled fragments may lead to implicit migration to a lo- 
cation where a switch-over on the next turn is not possible as well. Should this 
case arise, the next turn will yield deadlock. 

In the axioms for cyclic distributed interleaving with fragment searching dis- 
cussed below, binary functions app\ (where I £ C) from unlocated threads and 
distributed thread vectors to distributed thread vectors are used which are sim- 
ilar to the functions app l used in the axioms for cyclic distributed interleaving 
without fragment searching given in Section 10. The functions app[ are defined 
in Table 13. 

Moreover, a unary function pv on distributed thread vectors is used which 
permutes distributed thread vectors cyclicly with implicit migration as outlined 
above. The function pv is defined using two auxiliary functions: 

— a function iml mapping each fragment index i, distributed thread vector S 
and location / to the first location in S at which the fragment with index 
i is present if the fragment concerned is present anywhere, and location I 
otherwise; 

— a function iml mapping each non-empty distributed thread vector S to the 
first location in S at which the fragment is present to which the current 
thread ought to switch over on its next turn if the current thread is in that 
circumstance and the fragment concerned is present somewhere, and the 
current location otherwise. 

The function pv, as well as the auxiliary functions iml' and iml, are defined in 
Table 14. 

TA^j fs has the axioms of TA pt and in addition the axioms given in Tables 10, 
15 and 12. 

Guarded recursion and the use mechanism can be added to TA P * ; fs as they 
are added to BTA in Sections 2 and 3, respectively. 
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Table 14. Definition of the functions iml' , iml and pv 



iml'{i,{),l') = I' 

iml' '(i.Mf ~<M') =1 

iml'(i, [ 7 ]* ^ 5, /') = iml' {i, 8, 1') 



if i € 7 
if i 7 



imJ([0]f -*) = i 

imi([(S)- 7 ]f-*)=i 
im/([(D> ~ 7 ]f -i) = / 
im/([(a; < o > j/) ^7]f ~ <5) = / 

im*([(Si)~ 7 ]f ~<5) =/ if si G J 

2mZ([{Si) - 7 ]f - <5) = iml'(i, 6,1) if i $ I 

iml([(E) ~ 7 ]f -5) = / 
imZ([(a; < mg(n') > j/) ^ 7 ]* ^ <5) = / 

M(» = (> 

iml([(x) ~ 7 ]f ~<5) = /' pv([(a;) ~ 7 ]f ~<S) = app'i>(x,8 ~ [ 7 ]f) 



Table 15. Axioms for cyclic distributed interleaving with fragment searching 

||m((},«) =S PCDIfsl 

U([()] I h -...-[()} I lk ,a)=S PCDIfs2 

|| m ([< >]f - 5,a) = \\ m (5 ~ [< >]f , a) PCDIfs3 

||ai([<S>-7]f-*,a) = Ilm(*-[7]f,a) PCDIfs4 

Hm([<D> - 7 ]f - 5, a) = S D (|| m (<5 - [ 7 ]f , a)) PCDIfs5 
||m([<x<o>y)-7]f -<5,a) = 

||m(?w([(a:>~7]f ~<*)> l|m(pv ([<S/> ~ 7]f -5), a) PCDIfs6 

|| m ([<Si>~ 7 ]f~<5, W---W) = 

Z.tls.inito || m (pv([{xi) -7]f ~<5),(a:i)~...~(a:„)) ifi€7n[l,n] PCDIfs7 

|| m ([<Si>~ 7 ]f~<5, <*i)~...~ <*„)) = 

SD(||[n(<5~[7]f,<zi) ifi£7n[l,n] PCDIfs8 
llm([(E> - 7 ]f - 5, (xi> - . . . - (a*)) = 

□ fe (Z.tls.init o || m (pw([(a;i) ~ 7 ]f ~ 5), (xi) ~ . . . ~ (x fc }), 

Ltls.init o || m (fw([(a: fc ) - 7 ]f - <$), (si) - • • • - (a;*))) PCDIfs9 

HmC[<E> — y]f ~M»=S D (|[ m («5M 7 ]M») PCDIfslO 

|| m ([(a; < mg(n) > y) ~ 7 ]f ~ = i.tau o || m (app^(a:, 5 - [ 7 ]f ), a) if n € £ PCDIfsll 

llm([<sc < mg(n) > y> - 7 ]f ~S,a) = l.tau o || m (p^([(j/> - 7 ]f - tf), a) if n £ PCDIfsl2 
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12 Conclusions 



We have developed a theory of the behaviours exhibited by sequential programs 
on execution that covers the case where the programs have been split into frag- 
ments and have used it to describe analytic execution architectures suited for 
such programs. It happens that the resulting description is terse. We have also 
shown that threads and services as considered in this theory can be viewed as 
processes that are definable over an extension of ACP with conditions. Threads 
and services are introduced for pragmatic reasons only: describing them as gen- 
eral processes is awkward. For example, the description of analytic execution 
architectures suited for programs that have been split into fragments would no 
longer be terse if ACP with conditions had been used. 

We have also taken up the extension of the theory developed to the case 
where the steps of fragmented program behaviours are interleaved in the ways 
of non-distributed and distributed multi-threading. This work can be further 
elaborated on the lines of [9] to cover issues such as prevention from migration 
for threads that keep locks on shared services, load balancing by means of implicit 
migration, and the use of implicit migration to achieve availability of services 
needed by threads. 

The object pursued with the line of research that we have carried on with 
this paper is the development of a theoretical understanding of the concepts 
sequential program and sequential program behaviour. We regard the work pre- 
sented in this paper also as a preparatory step in the development of a theoretical 
understanding of the concept operating system. 
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